Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 02:11
Static task
static1
Behavioral task
behavioral1
Sample
b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a.exe
Resource
win10v2004-20220901-en
General
-
Target
b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a.exe
-
Size
1.3MB
-
MD5
4e50d96f7cc720ff3b0292a95d1e01dc
-
SHA1
ba1a0a2dfbaca297a768c62b72c7e2c610fe49e9
-
SHA256
b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a
-
SHA512
2b7a5aba1e7b99dd564274627b009e86f9c3eaf5032ee16bdd9cf9cce87a5b21c9793b03f77ed9c9ca96323f4384f7c6512e27300edffc1cc6c24501b05718b2
-
SSDEEP
24576:cpwRc/yU/NrD+U+ddryl6vWFnePtxwiKGvUIc4PYJWebrU4H1:mwRux/NP+Ufc9nqyiZBV
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4000 2672 WerFault.exe 81 2336 2672 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a.exe"C:\Users\Admin\AppData\Local\Temp\b61285177cb0da96b3c7d470a0e0b0ff13cab967be113542f846b493c19a788a.exe"1⤵PID:2672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 5762⤵
- Program crash
PID:4000
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 5762⤵
- Program crash
PID:2336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2672 -ip 26721⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2672 -ip 26721⤵PID:828